HBHORANDUM™-FOR: 


Chief, Regulations Control Division .. 
‘Office of ‘Information Services Bey 


25X1 FROM 


Director. of “Security 


etal 


Eee Pupeesak ‘vot a: request submitted Vodtesteniesaly bya. 
member of your staff, _this will serve:as confirmation. that’ I. have 
raquested use of the marking "Classified Confidential in-the . : 


Aggregate" as appropriate to classification | as 
Cowpliance VAC meeur Sty: Resetabnyaes 


oe ee ee an: peat oreable: LED - use. of the aired marking asa. 
tustifieation for clasetfication. RND/OTS has advised that the _ 


wrod 


marking is valid and your staff has advised that OGC has 
confirmed its legality. I understand further that the narking fs 
used sparingly and has not been publicized in the Agency as 3 
legally acceptable. The latter fact £s unfortunate in that it 
offers a solution to a serious problen, i.e, publication of 
unclassified papers that permit construction of a mosaic that is 
revealing and damaging in terms of disclosure of iatelligence. 
sources and methodse The Inspector General has an immediate: 
interest in this problem and is- supported. ‘in his.concern.'by - 
Agency. officials charged with implementation of an‘ ‘effective: ot. 
‘counterintelligence progras, myself included. Frankly, I see no 
alternative that would not involve violation of the peoetesoue Of iG e 
Executive Order 12065. be hae Pe ee 
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' provides current policy 
that is applicable to 
comliance with security 
‘regulations. 
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APD E44. ComMPLIANCE WITH SECURITY REGULATIONS[ | 25X1 
SYNOPSIS. This regulation prescribes CIA policy 


regarding compliance with security regulations. It Gefines 
and identifies responsibilities for investigating and re- 
porting violations and for imposing| penalties for}security 


25X11 violations.[ | 


a. AUTHORITY. The provisions of this regulation 


authorization by statute and Executive order to protect 


[ classified information and intelligence|sources and methods 


from unauthorized disclosure.. The National Security Act of 
1947, as amended, provides] the Director of Central intelli- 
gence (DCI) Jwith the authority] to texrminate(the enploynent| 
of any individual unwilling or unable to abice by security 
procedures, regulations, or requirements establisnec as 
protective measures or precautions. By delegation, the 
Deputy Director of Central Intelligence (DDCI) has the same 
authority. Other antnerities and responsibilities set forth 
in this regulation dealing with sanctions other ee Sis- 
missal are in keeping with the provisions off 25X 

2 Oe ae 
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b. GENERAL 


(1) [the agency] must function in accordance with 
strict security standards in order to fulfill its mission 


effectively. The maximum standards of security compatible 


with efficient operating procedures must always be observed 


and practiced, both in CONUS and overseas. In order to 


maintain such security standards, Deputy Directors, Heads of 


ST GAAS. Sa 


Independent Offices, and Operating officials (nereinafter 


| a oe 
7 referred to collectively as ''Agency officials'") [muse be 


informed of security weaknesses, violations of security 


regulations, or other breaches of security and, as a commaneé 


responsibility, they must] promptly institute remedial 


measures:and administer such disciplinary penalties as may 


be warranted. 


(2) This regulation applies to all categories of 


. 


25X1 personnel described in[___sid]s whose services are performed 


within the United States either in PCS or TDY status. 


(3) Notwithstanding the concept that security is a 


basic command function, nothing in this regulation will be 


a bar to the Director of Security making recommendations 


for the termination /of the employment/ of personnel employed 


cae by[the CIA,~as well as .the termination of the detail or 


assignment of personnel detailed to or assigned to the 


CIA|for any violation or series of violations considered 


‘ 
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for the scparation of CIA employees will be consi 


c. POLICY. Agency policy directecé toward the 


‘application of penalties for security violations is governed 


by the uniform sanctions epeelevea in er regulation, 
except when the circumstances associated with a given 

iaevacue or series cf ined dene clearly warrant more stringent 
action or, in the existence of mitigating factors, an 


equitable reduction. [ the Office of Security will recom- 


mend, pursuant to paragraph e(1)(g) below, the penalties 


be 


to be applied for violations other than the unintentiona 
eratien covered in paragraph g(1) (a) (1) below] In making 
recommendations, the Office of Security will be guided 

closely by the penalties established in this reculation and 

will suggest other penalties only when circumstances appli- 

cable to a particular case warrant the imposition of a 

more, or less, stringent penalty. Agency officiais will - : 
weigh the recommendations of the Office of Security in 

the same spirit of equity and justice. [An individual 

found responsible for a security viclation will be af- 


forded the opportunity to argue in his or her defense 


Prior to the imposition of a penalty. Only tne DCI or 
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the DDCI may effect {separation} except during an individual's 
trial period, when[Separations| may pe effected by the 
Director SE Personnel Policy, Planning, and Management 
(p/pppm). [L__] 
d. DEFINITION. A security violation is any 
breach, deliberate or inadvertent, of Agency security 
policy, regulations, requirements, or procedures. — , 25X11 
e. RESPONSIBILITIES 
(1) DIRECTOR OF SECURITY. Tne Director of 
Security or designee is responsible for: 
(a) Investigating all reported security pigistione 
within the United States, including any neglect in the 
application Be Secueity regulations. 
(b) Determining the person or persons responsible 
for such security violations. | 
(c) Determining the seriousness of a security 
violation in. coordination with appropriate Agency officials. 
(a) Maintaining records of all security oe 
tions, whether committed is the United States or abroad. 
(e) Informing the Agency officials concerned of 
any matter affecting the security of their operations. 


(£) Informing the D/PPPM of the names, dates, and 


types of violations in all third and Fourth security 
violation cases computed in accordance with paragraph 


g(1)(b) (1) below. 
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(g) Submitting Jappropriate| reports and reconm- 
mendations to Agency officials and to the DCI or pocI. 

2) OPERATING OFFICIALS AND HEADS OF INDEPENDENT 
OFFICES. Operating Officials and Heads of Independent 
offices are responsible for: 

(a) Imposing Ssatiiey violation penalties on 
personnel anaes nea jurisdiction pursuant to reconmenda-— 
tions from the Office of Security based on the standards 
established by this regulation. 

(b) Notifying the Director of Security in writing 
of corrective and disciplinary action taken in connection 
with security violations, including those reported from 


overseas. 


(c) Submitting a ot 
a /Eoxrms 1152, Request for Personnel Action,/ 
(feen—-+4+53) to the D/PPPM to implement decisions for suspen- 
sion or dismissal of Agency {employees[as well as the eee 
mination of the detail or assignment of personnel detailed 
or assigned to the cra} where appropriate. 

(da) Sueaetne euee cases of actual or possible er 
or compromise of classified or classifiable material, for any 
other breach of seeheuey of which they have knowledge] are 
prought immediately to the attention of the Director of 


Director of higher 
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authority. 
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(3) DIRECTOR OF PERSONNEL POLICY, PLANNING, AND 
MANAGEMENT. The D/PPPM is responsible for: 

(a) Implementing the provisions off when 25X11 
personnel action involving the [separation of CIA employees / 
is recommended by the. Director of Security or requested by 
an Agency official. | 

(b) [Processing requests for soRsenneL actions 
from Agency officials to implement the suspension or 
separation of CIA employees for security violations.| 

(c) Furnishing the Director of Security with a 
copy of each personnel action involving suspension or 
separation... 

: (4) PERSONNEL SUBJECT TO THIS REGULATION. 
Persons to whom this regulation applies are responsible for: 

(a) Constant and unrelenting observance of sound 
security practices [as presented in security indoctrination, 
security education and‘training, and consistent with 
guidance provided by supervision as a command function. 

(b) Immediate reporting of any actual or possible 
loss or compromise of classified or classifiable material 


or any other breach of security of which they have know- 


“ledge to their supervisor and the security officer of 


their component or the Director of security-| | 25X1 
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f£. INVESTIGATION O; SECURITY VIOLATIONS 

(1) All security violations or alleged breaches of 
security regulations occurring within the United States will 
be iugeeetenees by the Director of Sseureey ox Gesignee. Ié 
it is determined that there has been a probable exposure or 
disclosure of classified or classifiable nates at or infor- 
mation to unauthorized persons, the Agency official having 


primary interest and all other components concerned with the 


@ 
[ey 
} a 
fu 
cr 
it?) 
bh 
a) 
ion 
“<S 
cr 
=a 
119) 


information or material will be notified imn 
Office of Security in advance of a formal report in order to 
permit prompt action to ieesen the effects of the security 
breach. The formal report of investigation will include: 

(a) A written report of interview cof the person(s). 
concerned. 

(b) A finding as to the person or persons 
responsible. 

(c) A statement as to the degree of compr mise 
involved. 

(d) To the extent appropriate, the security 
violation history of oak person found responsible tor 
the violation. 

{e) If warranted, recommendations 
action that should be taken to preclude recurrence Oo 


such violations. 
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(2) The report of the investigation or a summary 
Cueeeod will be forwarded to the Agency official concerned, 
who will inform the Director of Security in writing of the 
disciplinary action taken under the provisions of this 


regulation. 


25X1 


g. PENALTIES FOR NONCOMPLIANCE. Persons to whom 


this regulation apply who fail to observe security regula- 


/applies/ . ; 
tions and policies or who are found to be responsible for 


“security violations are subject to the following admini- 


strative actions and, in certain serious cases, to criminal 
prosecution. 
(1) ADMINISTRATIVE ACTION 


(a) Penalties 


(1) The following are penalties for inadvertent 


security violations that concern failure to properly 


secure classified material and do not involve either 


intent or gross negligence. 
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(a) First Violation. Oral reprimand by the 
Operating Official or Head of Independent Office concerned 
or higher autharney and warning of possibie consequences of 
further violations. 

(b) Second Violation. Written reprimand anc 


. 


warning by the Agency official concerned of the possible 
consequences of subsequent violations. . 

(c) Third Violation. Suspension without pay for a 
period of one day and written warning from the D/pPPM as to 
consequences of a fourth violation. 

(a) Fourth Violation. Buspeneton without pay for 
ce days and a complete review of the individual's security 
file ee Director of Security who will, Lz warranted, 
provide the Agency official concerned with 4 recommendation 
for a more severe penalty. Such a recommendation may in- 
volve a longer period of suspension without pay up to a 
maximum of tweney days orfcould result in] termination or 

/20/ : . 
Agency employment or affiliation. 


(2) Failure to promptly report the loss or 


compromise of classified information will be penalizea 


y 


by suspension without pay for five days. Repetition of 


( 


this behavior after imposition of the prescribed penalty 


will lead to termination/of Agency employment or affiliation. 
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(3) Failure to afford proper protection to 
liassifica material either deliberately or out of gross 
neglect; e.g., unauthorized removal of classificd material . 
from office to home or any Senos location not provided with 
approved safeguarding equipment, will be penalized as 
follows: 

(a) Without intent to damage the national security, 
to make canes classified material, or to harm the Agency: 

(i) mei seea instances: five days suspension 
without pay. 

“(Gay Repeated instances: twenty days suspension 
without cre Repetition of this behavior after imposition 
of the prescribed penalty will lead to terminationfot Agency 
employment ox affiliation. 

(b) With intent to damage the national security, 


to make public classified material, or to harm the Agency: 
— : ° . a 
termination of [agency] employment ox [af fitiation). 

(4) Deliberate revelation of classified 
information or provision of classified information to 
unauthorized persons will be penalized as follows: 

(a) Without intent to damage the national 


security, to make public Plane eines material, or to harm the 


Agency: 


(i) Isolated instances: five days suspension 


without pay. 
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(ii) Repeated instances: twenty Gays suspension 
without pay. Repetition of this behavior after imposition 
of the SReeEe Enea Bonaley will lead to termination fot Agency 
employment or affiliation} 

(b) With intent to damage the national security, 
to make public sqeestenes Material, or to harm the Agency: 
termination of [agency \employment or [arfitiationl, 

(b) Exceptions 

(1) Two-Year Provision. In the case of an 
individual who has served two continuous years without a 
security. violation of the nature set forth in paragraph 
g(1) (a) (1), any ox all similar violations that he or she 
committed prior to the eeanensenent of the two-year period. 
will be disregarded for purposes of determining whether a 
violation is the first, second, third, or fourth; however, 
they will continue to be a part of the individual's security 
file. | 

(2) Lesser Penalties. A lesser penalty than 
called for under paragraph g (1) (a) may be imposed if, in the 


judgment of the [responsible| agency official, local operating 


+ "GW Y 3 aS + 5 
conditions justify such action. This authority may not be 
. F : beds 
delegated. Where the prescribed penalty 1s termination [of 


Agency employment or affiliation, a lesser penalty can be 


imposed only by the DCI or pDpCI. 
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(3) Substitute Penalties 


lovees and Staff 


(a) Staff Personnel 


Agents). For staff personnel 


25X11 


(b) Personnel Detailed or Assigned From Other 
Government Agencies. Where the prescribed penalty is loss 
of pay, the Agency official will invoke a suitable sub- 
stitute penalty. Where the penalty is termination of 
affiliation, such individuals will be returned to their 

fet . ° oS 
parent agency and the p/ppeM,| in coordination with the 
General counsel, wit [notify (the parent agency Jof the 
pheoxmination so that further action will be taken by the 
/separation/ | 
parent. agency as the circumstances warrant. 

(c) Contract Eereonne!. It will be the duty of 
the cognizant Agency official to consider security viola- 
tions on a case~by-case basis and to favors such penalties 

“as are considered equitable and compatible with the cover 
and the terms of the contract. When feasible, the pre- 


scribed penalties set forth in this regulation will be 


included in the contract. 
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(4) Accountability For and Reporting of BCSee% or 
Substitute penalties. | The fact that a lesser or substitute 
Sennkey is imposed than called for under paragraph g(i) (a) 
will not be construed as cancelling the violation. In all 
-cases of lesser or substitute penalties, the report of 
action taken will be forwarded to the Director of Security 
and will contain the circumstances or conditions that 
warrant a lesser or substitute penalty and the penalty 
imposed. 

(c) Special Penalty Provisions. In CRSce SEs 
volving gross negligence or willful noncompliance with 
security regulations, regardless of the security violation 
record of the individual, penalties will be assessed ona 
‘case-by-case basis in accordance with the seriousness of the 
individual violation. 

(d) Dismissal. It is recognized that a single 
- security breach may be serious enough to warrant the 
gepavation of the individual from the RGSHSY Similar 
action also may be warranted in the case of a chronic 
offender. In such cases the Agency official concerned will 
advise the Director of Security of intent and forward 
requests for dismissal to the D/PPPM with necessary papers 
eae eee na ae The D/PPPH will furnish tne 
Director of Security a copy of the personnel action 


accomplished. 
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(2) CRIMINAL PROSECUTION. Appropriate cases will 
be [forwardea(to the Department of Justice by the General 
Counsel for prosécution under the espionage laws and other 
pertinent statutes. [a=2al 

h. IMPOSITION OF PENALTIES 

(1) the Agency official concerned will effect the’ 
imposition of dees ey penalties or, when the penalty in- 
volves a personnel action or criminal prosecution, will 
address recommendations to the D/PPPi. The Agency official 
will provide written notification to the Director of 
Security of proposed and effected actions taken ta each 
case. 

(2) Requests for suspension or separation will be 
eapened in accordance with[ sana forwarded to the 


D/PPPM with all pertinent papers attached, for action 


° 


indicated. The D/PPPM may choose to obtain a recommendation 


from the Director of Security and will furnish the Director 


of Security a copy of the personnel action effecting the 


suspension or dismissal. =z 
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